Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: PyQrRWVZuNjTca920Y5yhOHJLSLNpqN8I8xzCz2Bi3k=
Subject key identifier: 3D:4F:98:1D:6C:C5:92:5D:0F:55:B6:FE:40:49:7E:E9:4A:41:AD:90
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 0198820BE3DB585D30396EFAAF44D16389AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 0497
Signing time: Thu 07 Aug 2025 01:01:13 +0000
Manifest this update: Thu 07 Aug 2025 01:01:13 +0000
Manifest next update: Fri 08 Aug 2025 01:01:13 +0000
Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: k5gGpD6vlAWb3JHHckRl8zRDIHfdSkBwzvxH1P9tHc4=)
2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:e3:db:58:5d:30:39:6e:fa:af:44:d1:63:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: Aug 7 01:01:13 2025 GMT
Not After : Aug 8 01:01:13 2025 GMT
Subject: CN=3d4f981d6cc5925d0f55b6fe40497ee94a41ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:89:07:c1:b4:92:22:be:fa:21:b5:b1:63:
21:05:03:b8:a5:d9:91:dc:2e:5c:04:da:f8:63:c2:
08:90:0b:be:c9:9a:36:93:35:3b:58:1e:f9:9f:fc:
96:0b:a3:c1:40:54:01:22:14:89:17:15:98:63:f7:
fd:38:d9:7a:3b:62:93:48:d0:18:3a:b6:d6:b7:2d:
2a:89:e3:9f:e9:7b:36:7b:ea:7c:c8:42:b6:be:98:
d4:71:9b:05:8d:53:1a:2d:cf:ae:78:1e:2e:c6:76:
fc:5d:a8:26:37:fe:46:86:8f:fd:c3:f7:65:74:b8:
e6:55:b2:28:ed:4b:c7:d3:aa:ed:ae:9d:b3:75:90:
50:db:33:17:70:f0:10:f7:eb:8b:5a:b4:62:24:5a:
d1:04:39:5b:a5:04:9b:70:15:ed:4b:9b:23:12:98:
4a:0d:6c:f9:b4:b8:54:8a:f4:b9:a6:cd:6c:e3:ba:
38:e3:eb:cc:bb:98:39:dc:c6:0d:31:7e:35:12:98:
19:f5:ac:c9:f6:79:ec:78:25:5a:f3:b2:b0:1c:48:
a3:b3:f6:0d:5d:62:ae:b8:a6:f0:f6:0a:36:19:f6:
65:81:c2:46:a2:d4:62:f5:1c:3a:ae:5e:8f:a8:02:
80:d1:8d:b2:c2:67:d4:29:43:49:78:98:3f:50:2f:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4F:98:1D:6C:C5:92:5D:0F:55:B6:FE:40:49:7E:E9:4A:41:AD:90
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:71:6a:01:b0:42:cd:2c:cc:26:36:83:50:1c:f8:5c:0b:
1e:8c:69:7d:aa:67:bd:73:0a:bb:c6:7e:03:b6:b6:17:bf:21:
37:d5:08:00:f0:63:1b:0d:a6:a6:34:4d:ca:b1:04:ff:bb:8e:
d4:24:36:1f:4e:57:87:67:72:c9:36:f4:fb:b8:6f:00:ac:27:
02:ec:0f:6d:3c:59:6c:66:8b:e0:0a:5a:08:18:70:ce:d1:eb:
2f:48:46:2d:72:f3:59:28:47:0e:b3:40:42:86:4d:07:1e:6c:
54:48:35:cb:f2:35:7d:33:98:44:00:c7:42:25:b8:9f:56:a0:
99:61:ce:a7:bf:da:52:6d:ee:18:15:57:05:a1:4e:ca:b8:1f:
f0:52:c0:4f:a6:3f:28:ae:4a:e1:b9:cf:bc:25:55:e7:9b:9a:
67:92:60:e3:88:8c:98:69:89:f1:c9:7d:a9:54:fc:c3:55:1e:
42:7b:95:49:f8:01:9c:7c:5d:3a:e7:b7:7a:0c:54:08:8b:7d:
0b:82:cb:76:3b:75:32:74:ad:9e:bf:26:1b:e7:66:e5:b6:81:
b1:95:87:45:6b:d1:3b:c4:66:1c:8d:41:f8:2c:73:4b:e0:22:
94:35:91:a7:3e:23:82:fd:e4:a7:5a:89:51:1d:ac:b2:ae:5e:
ac:d1:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:07 2025 by rpki-client